Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2023 03:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
71b1703bd754be87c789ce52f9589effef32c505cc0996fcfd920c70075f33ab.dll
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
71b1703bd754be87c789ce52f9589effef32c505cc0996fcfd920c70075f33ab.dll
-
Size
1.2MB
-
MD5
9a0df6ba03d4dbaee8e039de44c085f8
-
SHA1
3a433ad6f71a0afd31492c3b6a8a609e9e8cbd38
-
SHA256
71b1703bd754be87c789ce52f9589effef32c505cc0996fcfd920c70075f33ab
-
SHA512
18ad3c181b91b45aa1755a56652c25586188eeadd77441bcf004080415df672af10d4c5a976c0de30f555cc6407951981a9adc222bb20257ed86fbc012e892a7
-
SSDEEP
24576:jtl0RPQ02pA6bHvn6/yzI+bdIP7P6d4SitpwqrK1AmIfGH0qh/OM/O:UGpS6RQSi56lthQ
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 3008 1964 WerFault.exe 61
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\71b1703bd754be87c789ce52f9589effef32c505cc0996fcfd920c70075f33ab.dll,#11⤵PID:1964
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 1964 -s 3282⤵
- Program crash
PID:3008
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 364 -p 1964 -ip 19641⤵PID:2288